Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json)
Hash identifier: A5/MPf/JWuVdMAQ23nfI6Fxg9EQhcQQc99hQmRWPu0w=
Subject key identifier: A6:BF:D4:A2:53:A1:8B:2D:77:8E:97:96:46:C8:99:8F:D4:F7:C9:32
Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
Certificate issuer: /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Certificate serial: 019510C72FFE4C9526CF0C003099F65443A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
Manifest number: 0A30
Signing time: Sun 16 Feb 2025 22:00:44 +0000
Manifest this update: Sun 16 Feb 2025 22:00:44 +0000
Manifest next update: Mon 17 Feb 2025 22:00:44 +0000
Files and hashes: 1: CyEvz68_PuSD2VXrrDfN85-80B0.roa (hash: iumx0jfFgEFRTvhq+tByJZI5kHgTeLx3n+N6ZSqFUeI=)
2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: vqknJxW2coZGvYWTqC+9T3vxslbmAf5kVQdp+/+Go9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:2f:fe:4c:95:26:cf:0c:00:30:99:f6:54:43:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Validity
Not Before: Feb 16 22:00:44 2025 GMT
Not After : Feb 17 22:00:44 2025 GMT
Subject: CN=a6bfd4a253a18b2d778e979646c8998fd4f7c932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:ca:0c:e0:32:ec:6b:15:6d:48:6e:74:3e:
a3:fd:52:7f:0f:d2:35:97:2f:f4:af:04:59:9f:ec:
eb:dc:23:f7:29:c9:36:05:3c:fa:b3:93:3c:3b:ba:
21:27:0f:d2:20:06:01:9c:de:2a:11:f0:72:7e:34:
01:0b:0d:04:06:7d:19:28:9b:a6:5a:0b:01:ec:7d:
f2:35:df:79:59:e5:64:18:2c:b6:30:42:e3:a4:61:
e2:2f:e1:c2:fa:f7:c0:45:68:80:6c:d8:aa:10:d2:
ba:44:58:a8:1e:e0:65:5a:46:0b:3d:3a:b5:45:f5:
30:59:49:dd:16:3b:3d:b0:40:07:62:38:e5:10:29:
b9:72:7e:38:80:48:de:f8:08:57:82:da:87:be:6a:
20:6b:b9:c6:18:76:2c:46:16:a3:6e:40:d2:3e:d4:
7b:08:f7:e4:df:65:ed:c8:80:fd:83:4a:a7:56:ff:
71:0e:6a:29:95:77:70:42:71:68:ea:42:09:eb:80:
42:9b:bc:9b:e0:6d:20:c4:ae:db:04:9d:81:a0:62:
e0:11:80:4e:37:60:25:51:18:06:6a:93:1a:53:0b:
a3:76:49:de:2d:15:42:7e:c7:3c:0d:1b:d9:ea:b3:
5f:9c:2a:db:fb:ee:b0:8d:27:67:24:2a:bc:0b:20:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BF:D4:A2:53:A1:8B:2D:77:8E:97:96:46:C8:99:8F:D4:F7:C9:32
X509v3 Authority Key Identifier:
keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:11:e9:c0:8d:87:6d:14:27:83:63:d2:4f:60:5a:45:a5:62:
8d:c3:18:1d:b1:67:ac:42:67:59:85:e5:e3:da:42:d4:91:2d:
01:0d:e7:26:18:7f:9b:c3:a6:fb:4f:98:e3:6b:90:9c:d5:c9:
7e:36:70:c0:93:49:d4:1a:e4:65:74:e2:ba:71:ee:a3:3a:c6:
fa:ce:5e:35:3d:26:f3:0e:2a:f8:d9:01:b3:41:39:58:a9:43:
e1:01:ff:e8:d6:07:13:29:8e:0e:4c:0f:6f:0a:57:d2:94:63:
e8:19:ff:9d:4b:aa:b5:b8:5f:ad:f2:63:a8:fb:98:24:d4:b8:
aa:bf:b5:75:b5:7b:4d:59:f4:1b:a3:1d:9e:7e:62:70:14:f7:
7f:5e:ef:42:d0:22:5e:31:86:a5:8e:f6:33:31:5e:81:7d:ef:
be:a7:2c:58:65:67:af:0c:fd:91:17:30:1d:b1:2f:a0:e2:e8:
26:d8:75:5e:fe:35:d4:18:6e:85:6b:59:9c:2a:47:71:ba:ac:
88:54:cf:8a:17:5a:71:53:58:83:37:08:e7:a0:31:c1:5d:13:
5a:70:2e:ef:da:31:78:8c:4b:be:d5:f0:7f:f4:44:44:c0:ee:
2d:a4:64:0a:5c:79:32:f8:1a:60:96:2f:c4:d6:9e:f1:6e:fd:
9b:7c:da:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:37 2025 by rpki-client